Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EqGCISL5g0U4ZtaWVzn1FtUhTSw.roa
File: EqGCISL5g0U4ZtaWVzn1FtUhTSw.roa (raw, json)
Hash identifier: Uw4AF/khm6fBAT0EaKBDk1/etfosSbLBxraTI2XLGwk=
Subject key identifier: 12:A1:82:21:22:F9:83:45:38:66:D6:96:57:39:F5:16:D5:21:4D:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3803
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EqGCISL5g0U4ZtaWVzn1FtUhTSw.roa
Signing time: Wed 03 Apr 2024 06:22:18 +0000
ROA not before: Wed 03 Apr 2024 06:22:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14339 (0x3803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 06:22:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=12A1822122F983453866D6965739F516D5214D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:4b:1f:6a:84:e7:79:ca:77:ba:3f:98:c4:
b3:92:5d:75:a3:14:50:0b:c2:36:d7:9d:b8:2c:92:
f1:6d:37:0d:8d:3a:e9:ce:a6:82:a1:0e:f1:2d:7b:
d8:ad:c8:ce:20:c4:b3:c5:0b:78:b6:0e:da:95:8e:
c5:93:1f:83:ae:8c:7e:fc:a6:5c:b4:d1:87:3b:7a:
a2:9a:58:de:b8:f4:7d:2c:a7:2f:3e:a9:4f:ec:2b:
0c:69:6e:46:13:03:dd:80:a4:d6:fa:64:dc:ea:d8:
ee:f6:8a:65:17:30:76:23:4c:e4:c1:44:64:5a:78:
af:19:c3:e7:db:22:16:f7:65:63:c4:c5:5e:95:1e:
e0:c3:4f:2c:30:2d:f8:6c:4f:ca:02:a7:d5:bd:6f:
2c:e7:f6:e9:83:c8:19:69:b3:41:ea:ab:9c:e0:4f:
86:66:75:c6:3e:05:e2:e5:31:00:00:b6:cc:26:b0:
78:d0:4c:06:88:d7:ba:d9:01:41:90:7e:47:76:dc:
85:ae:18:26:0b:9c:0d:13:9a:6c:78:cc:37:38:3e:
52:87:4c:18:43:07:88:46:00:d1:0a:9e:ed:ca:a4:
9d:4e:14:4a:50:71:98:ea:34:6e:eb:12:06:81:4d:
18:fc:16:51:63:b9:ad:ed:eb:5c:17:a4:80:96:0a:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:82:21:22:F9:83:45:38:66:D6:96:57:39:F5:16:D5:21:4D:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EqGCISL5g0U4ZtaWVzn1FtUhTSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
45:7f:c9:f8:67:67:73:29:0f:62:c9:a1:a5:19:8d:30:40:2b:
24:69:f5:07:72:7a:47:9f:c1:0a:00:26:9d:d0:00:de:95:d6:
da:8b:39:e3:a0:fd:08:35:41:a1:24:04:e2:67:db:ec:07:43:
07:18:0d:be:7f:ca:83:c5:83:44:df:86:b8:1d:4d:67:3c:7a:
7f:5b:82:ee:77:6d:92:0f:f6:09:33:61:b2:b4:d4:5f:b1:7c:
39:da:45:0d:1c:0f:2c:d4:93:63:9f:bc:70:a9:05:7e:d9:27:
65:82:4d:4c:6a:52:da:1f:7c:5c:ed:4f:81:40:1f:b2:03:be:
3d:a8:e8:d2:e7:8b:72:c4:99:38:06:61:a7:2a:e6:3f:1f:9a:
25:67:58:85:60:1e:b1:92:19:e6:3c:6a:40:13:c6:72:36:61:
04:44:98:76:3b:a5:a2:fe:5e:f4:bf:62:6b:73:d8:8a:88:b3:
d7:27:fc:72:ff:e0:2f:dc:17:fc:c8:01:b4:12:2e:59:6e:af:
31:14:f4:67:9f:1a:d5:90:66:6a:5d:95:ca:92:74:37:35:33:
d8:86:18:75:56:6b:35:67:14:97:d5:45:ce:99:45:91:15:27:
23:67:78:14:8e:7a:08:b7:fb:73:48:e8:97:00:b5:5c:12:52:
26:6a:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:35 2025 by rpki-client